feat: add initial secrets

internal/start/start.go

@@ -514,6 +514,22 @@ EOF
 			)
 		}
 
+		if utils.Config.Auth.Hook.SendSMS.Enabled {
+			env = append(
+				env,
+				"GOTRUE_HOOK_SEND_SMS_ENABLED=true",
+				"GOTRUE_HOOK_SEND_SMS_URI="+utils.Config.Auth.Hook.SendSMS.URI,
+			)
+		}
+
+		if utils.Config.Auth.Hook.SendEmail.Enabled {
+			env = append(
+				env,
+				"GOTRUE_HOOK_SEND_EMAIL_ENABLED=true",
+				"GOTRUE_HOOK_SEND_Email_URI="+utils.Config.Auth.Hook.SendEmail.URI,
+			)
+		}
+
 		for name, config := range utils.Config.Auth.External {
 			env = append(
 				env,

internal/utils/config.go

@@ -356,11 +356,14 @@ type (
 		MFAVerificationAttempt      hookConfig `toml:"mfa_verification_attempt"`
 		PasswordVerificationAttempt hookConfig `toml:"password_verification_attempt"`
 		CustomAccessToken           hookConfig `toml:"custom_access_token"`
+		SendSMS                     hookConfig `toml:"send_sms"`
+		SendEmail                   hookConfig `toml:"send_email"`
 	}
 
 	hookConfig struct {
-		Enabled bool   `toml:"enabled"`
-		URI     string `toml:"uri"`
+		Enabled         bool   `toml:"enabled"`
+		URI             string `toml:"uri"`
+		HTTPHookSecrets string `toml:"secrets"`
 	}
 
 	twilioConfig struct {
@@ -673,6 +676,23 @@ func LoadConfigFS(fsys afero.Fs) error {
 				}
 			}
 
+			if Config.Auth.Hook.SendSMS.Enabled {
+				if Config.Auth.Hook.SendSMS.URI == "" {
+					return errors.New("Missing required field in config: auth.hook.send_sms.uri")
+				}
+				if !strings.HasPrefix(Config.Auth.Hook.SendSMS, "http") {
+					return errors.New("Invalid HTTP hook config: auth.hook.send_sms.uri should be a http or https URL")
+				}
+			}
+			if Config.Auth.Hook.SendEmail.Enabled {
+				if Config.Auth.Hook.SendSMS.URI == "" {
+					return errors.New("Missing required field in config: auth.hook.custom_access_token.uri")
+				}
+				if !strings.HasPrefix(Config.Auth.Hook.SendSMS, "http") {
+					return errors.New("Invalid HTTP hook config: auth.hook.send_email.uri should be a http or https URL")
+				}
+			}
+
 			// Validate oauth config
 			for ext, provider := range Config.Auth.External {
 				if !provider.Enabled {